Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

78,137cataloged exploits
35,961CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,458Referência 22,657GitHub PoC 14,424VulnCheck XDB 8,773Nuclei 4,340Metasploit 3,485✓ verified onlyrecentpopularrisk
22,657 exploits
Referência
CVE-2021-47922
CVE-2021-47922MEDIUM
WordPress Plugin Slider by Soliloquy 2.6.2 Stored XSS
33RISK
open ↗
Referência
CVE-2021-47907
CVE-2021-47907MEDIUM
Rocket LMS 1.1 Persistent Cross-Site Scripting via Support Tickets
33RISK
open ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RISK
open ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RISK
open ↗
Referência
CVE-2006-5190
CVE-2006-5190—
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RISK
open ↗
Referência
CVE-2026-78141
CVE-2026-78141MEDIUM
Tenda CH22 exeCommand formexeCommand command injection
33RISK
open ↗
Referência
CVE-2026-78140
CVE-2026-78140MEDIUM
Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
33RISK
open ↗
Referência
CVE-2026-78115
CVE-2026-78115MEDIUM
SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization
33RISK
open ↗
Referência
CVE-2026-10053
CVE-2026-10053HIGH
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
41RISK
open ↗
Referência
CVE-2026-78112
CVE-2026-78112MEDIUM
itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection
33RISK
open ↗
Referência
CVE-2026-77116
CVE-2026-77116MEDIUM
Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview
33RISK
open ↗
Referência
CVE-2026-77001
CVE-2026-77001CRITICAL
Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass
48RISK
open ↗
Referência
CVE-2018-25303
CVE-2018-25303HIGH
Allok Video to DVD Burner 2.6.1217 Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2018-25302
CVE-2018-25302HIGH
Allok AVI to DVD SVCD VCD Converter 4.0.1217 Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2018-25301
CVE-2018-25301HIGH
Easy MPEG to DVD Burner 1.7.11 SEH Local Buffer Overflow
41RISK
open ↗
Referência
CVE-2026-7127
CVE-2026-7127MEDIUM
SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection
33RISK
open ↗
Referência
CVE-2026-7123
CVE-2026-7123CRITICAL
Totolink A8000RU CGI cstecgi.cgi setIptvCfg os command injection
48RISK
open ↗
Referência
CVE-2026-7122
CVE-2026-7122CRITICAL
Totolink A8000RU CGI cstecgi.cgi setUPnPCfg os command injection
48RISK
open ↗
Referência
CVE-2026-7119
CVE-2026-7119HIGH
Tenda HG3 formCountrystr os command injection
41RISK
open ↗
Referência
CVE-2026-7118
CVE-2026-7118MEDIUM
code-projects Employee Management System cancel.php sql injection
33RISK
open ↗
Referência
CVE-2018-25264
CVE-2018-25264MEDIUM
TransMac 12.2 Denial of Service via License Key Field
33RISK
open ↗
Referência
CVE-2018-25263
CVE-2018-25263HIGH
Faleemi Desktop Software 1.8.2 Local Buffer Overflow SEH
41RISK
open ↗
Referência
CVE-2026-7043
CVE-2026-7043MEDIUM
GreenCMS index.php pluginAddLocal unrestricted upload
33RISK
open ↗
Referência
CVE-2026-7042
CVE-2026-7042MEDIUM
666ghj MiroFish REST API Endpoint __init__.py create_app missing authentication
33RISK
open ↗
Referência
CVE-2026-7041
CVE-2026-7041MEDIUM
666ghj MiroFish Werkzeug Debugger PIN console information disclosure
33RISK
open ↗
Referência
CVE-2026-7039
CVE-2026-7039HIGH
tufantunc ssh-mcp index.ts shell.write command injection
41RISK
open ↗
Referência
CVE-2026-7038
CVE-2026-7038MEDIUM
tufantunc ssh-mcp Command Line index.ts insufficiently protected credentials
33RISK
open ↗
Referência
CVE-2026-7037
CVE-2026-7037CRITICAL
Totolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injection
48RISK
open ↗
Referência
CVE-2026-7036
CVE-2026-7036MEDIUM
Tenda i9 HTTP R7WebsSecurityHandlerfunction path traversal
33RISK
open ↗
Referência
CVE-2026-7035
CVE-2026-7035HIGH
Tenda FH1202 httpd WrlclientSet fromWrlclientSet stack-based overflow
41RISK
open ↗
← previouspage 649 / 756next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.